#!/bin/sh

# lcfirewall configuration file.


# The lcfirewall.conf script is designed to work in
# a system with one or two network interface cards
# or NICs.  A system with one NIC only acts as a 
# server.  A system with two NICs acts as a gateway
# between two networks.
#
# Any configuration parameter definitions in this
# configuration file that start with MAIN refer to
# the parameters associated with the NIC connected
# to the Internet.
#
# Any configuration parameter definitions that
# start with ALTERNATE refer to the parameters
# associated with the NIC connected to the LAN.
# All ALTERNATE parameters are *OPTIONAL* so
# the are ignored if the system only has one NIC.

MAIN_NIC=eth0
MAIN_IP=74.0.125.28

ALTERNATE_NIC=eth1
ALTERNATE_IP=192.168.0.240
ALTERNATE_NET="192.168.0.0/24"


# OPEN_PORTS is a list of the ports that the server
# exposes to the real world.  For example, this server
# may have Samba installed to act as a file server
# for the LAN.  This port, however, need not (and 
# some may argue 'should not') be exposed to the
# real world.  In that case, the Samba port (138)
# won't be on this list.

OPEN_PORTS="22 25 53 80 143 443 8080 6881 6882 6883 6884 6885 6886 6887 6888 6889 6890 6891 6892 6893 6894 6895 6896 59090"


# Every once in a while some pest will try to do
# something illegal/damaging/dumb to the server.
# The BANNED_IP_ADDRESSES parameter is a space-
# separated list of IP addresses that you wish to
# prevent from accessing the server.

BANNED_IP_ADDRESSES="193.207.146.153"

